Cookies & Privacy Policy

A. Our website's cookies policy

A1. Information about cookies

We consider it important for you to know which cookies are used on our website and why. Our aim is to inform and protect you and improve your experience. Our websites use cookies under Article 6(1)(f) of EU Regulation 2016/679.

A2. Why cookies are used

We use cookies for optimal operation, correct navigation, security, login and movement between pages, and, if you wish, advertising content based on your interests and needs. Cookies also help us analyse how visitors use and navigate the website and whether problems occur so that we can resolve them. Information collected by these cookies is anonymous and used only to improve the website's structure and content.

A3. What cookies are

Cookies are small plain-text information files stored on your computer or another internet-connected device, such as a smartphone or tablet, when you visit web pages. They do not damage your computer or its files. Without them, personal preferences could not be stored and every visit would be like the first. Cookies are safe and do not store email addresses or telephone numbers.

B. Privacy policy

B1. Security

Freedman recognises the importance of personal-data and electronic-transaction security and has taken the necessary measures to ensure the greatest possible security in compliance with the General Data Protection Regulation (GDPR). All information relating to users' personal details is treated as confidential. Freedman uses SSL for secure online transactions, encrypting personal information, including card number, name and address, so that it cannot be read or altered during transmission over the internet.

SSL (Secure Sockets Layer) is an internet standard for website authentication and encryption between users and web servers. Information is encrypted by the sender's software and decrypted by the recipient's software, protecting personal information in transit. A mechanism also automatically checks whether transmitted data has been altered.

B2. Scope and access

Our aim is for you to feel safe on our website. This policy concerns everyone purchasing and using our products through it and explains our use of personal data under Greek data-protection law and EU Regulation 2016/679. If you disagree with the policy as in force, you may stop using the website. We limit collection, processing and access to employees and third parties who need it for their professional duties, as described below. Employees process personal data only under our instructions and are bound by confidentiality obligations.

B3. Data breaches

Freedman will notify you and the competent authorities of a data breach where required by law.

B4. Data controller

Freedman processes your personal data as controller. Send questions about processing to info@freedman.gr or by post to 92 Monastiriou Street, Thessaloniki, 54627, Greece.

B5. What personal data means

“Personal data” means information about you that allows identification directly or together with other information we hold. We collect and request only data necessary and appropriate to provide services and a functioning website. This may include your name, address, email, telephone and other contact details, collected when purchasing as a guest or registered user, first registering for online services or creating an account; account information such as username, identifiers and credentials; order history and products selected or viewed; and, depending on device settings, device, browsing, IP address, cookie and location information.

B6. When we collect data

We request personal data when you purchase, register for our online services, subscribe to marketing updates/newsletters or submit a contact form. In other cases, collection may be automatic or based on information transmitted by third parties. You can generally browse without sharing identifying data, but connection, browsing and interaction information is collected automatically for website security. Under EU Regulation 2016/679, general data and information are collected on each access and temporarily stored in server logs generated by the electronic processing system's automatic recording.

B7. Data collection in detail

Connection data

Depending on device settings, we collect information about the device used to browse, such as operating system, browser type, IP address, date and time of access, proxy server, indicated IP location and internet provider.

Browsing data

We may collect visit information, including browser, pages visited, items clicked, viewed or added to the bag, and the link that brought you to our website. This is generally collected through digital identifiers such as device number, browser cookies or IP address, which distinguish one browser/device from another. We may examine server logs where there are specific indications of unlawful use. Collection and storage are necessary for website operation, functionality and content delivery, and are also used to optimise the website and secure our IT systems. The legal basis is Article 6(1)(f) of EU Regulation 2016/679.

Guest orders

To enter into and perform a purchase, we request the relevant contact details, such as first and last name, father's name, email, address including street number and postcode, telephone, country of residence and payment-method information. With your consent, we may retain your email for newsletters, offers, promotional material and personalised advertising. Guest purchase data is used to complete the purchase and is not added to any User Account you may hold. Processing is necessary for the Contract under Article 6(1)(b).

User accounts

In addition to personal information such as name, address and telephone, User Accounts collect preferences, order history, and products selected, viewed or added to the bag. With your consent at registration, we may retain email and/or telephone for newsletters, offers, promotional material and personalised advertising.

Contact forms

We collect first name, last name and email solely to reply to your requested communication. Information provided through the form is collected and stored under Article 6(1)(a). Communication is recorded and data collected to provide evidence of it under legal requirements. Consent is obtained when you complete the form, which refers to this Privacy Policy.

Newsletter subscriptions

You may subscribe through the website to receive promotional updates, offers, discounts and personalised advertising. Form data is sent to us. Registration uses double opt-in: you receive an email requesting confirmation, preventing others from submitting email addresses they do not own. Consent to processing is obtained during registration, which refers to this policy. Newsletter and promotional-message processing is optional, based on consent and Article 6(1)(a). If you buy products or services through our website, we may send information about other similar products or services to the email provided even without consent. Every communication offers easy, immediate and unconditional unsubscribe. We aim to include only information you may find interesting.

Social media data

Personal data collected includes public data submitted in Freedman's social-media environment and made available by the relevant provider, such as basic profile/account details, comments and content posted or shared. Profile data may also be recorded when you click a “like” or similar button on our sites or services. That action is recorded and viewed content may appear on your profile or social feed. Information received depends on your social-account privacy settings. You can control profile access according to the network's privacy policy and instructions.

We do not collect or use data belonging to children under 16. If data from a child under 16 is found to have been collected without verifiable parental consent, it will be deleted as soon as possible. If you believe this has occurred, notify info@freedman.gr. Newsletter subscriptions, including telephone subscriptions, are intended only for people over 16.

B8. Purposes of processing

Freedman processes personal data only where the law permits: to perform our Contract; where necessary for our legitimate interests or those of a third party and your interests; to comply with legal/regulatory duties; or with your express consent.

Browsing and account registration

Browsing and account creation involve processing information you provide and browsing details such as IP address, bag contents and order history, to give access to products and services, make website use convenient and secure the system.

Managing and performing contracts

We use personal information to perform our Contract, deliver orders and communicate by email, SMS and/or Viber about order status and matters relating to its performance.

Improving the website, products, services and customer relationships

To pursue our legitimate interests, improve products and services, assess interactions, develop our business, tailor communications to your preferences and behaviour and provide a personalised experience, we may analyse and combine account, browsing and interaction information. This data helps improve the website and applications, including through technologies placing cookies on devices or in emails, and provide higher-quality services.

Newsletters and personalised advertising by email

When visiting, purchasing or creating an account, you may subscribe to newsletters and other Freedman email communications. Every communication offers easy, immediate, unconditional unsubscribe. Following a purchase, we may send information about similar products and services to your provided email even without consent. We aim to include information you may find interesting.

Further purposes are managing website communication; customer service and support; responding to access, correction and deletion rights, enquiries and complaints; issuing and sending purchase records such as digital receipts or invoices; legal compliance; detecting and preventing fraud, crime, claims and other liabilities; and network/information security to protect against loss, damage, theft and unauthorised access.

B9. Transfers of personal data

We may transfer personal information to representatives, subcontractors and partners to support, promote and perform our business relationship, under conditions ensuring no unlawful processing or use outside the transfer purpose. We seek the highest possible security and select providers, payment processors and partners carefully in advance, binding them contractually to data-protection law. Data is transferred only to bodies established in the EU and subject to its strict rules, or bound by an equivalent security standard. Transfers to third countries do not take place and are not currently envisaged. Using social-network icons automatically transmits identity-related data to those networks.

For website operation, optimisation and contract performance, we engage providers for central IT services, accounting, hosting, payments, product dispatch, equipment installation and newsletters. We share only information necessary for each purpose, such as name and address. We agree specific data-protection measures with providers and monitor them regularly.

Payment data is sent to the processor or bank specified in the order. Card transactions undergo security checks with the processor to prevent fraud. We do not collect or store payment details such as card or account numbers; these are sent exclusively and directly to the payment processor. Delivery/transport providers receive information such as the email or telephone supplied with the order to arrange delivery times. Freedman uses partners such as ACS Courier and transfers personal data to perform the Contract. Such recipients act as processors on our behalf and must not process data for other purposes.

Freedman does not sell, otherwise transfer or disclose personal details to other third parties without consent, except where required by law or a competent authority. Records may be disclosed to judicial, police and administrative authorities following a lawful request under applicable legislation. In response to a lawful provision, official order or formal preliminary investigation, we reserve the right to make relevant details available to the appropriate authority.

B10. Retention

We regularly ensure that personal data is accurate and current, updating stored data during lawful processing. Data is retained throughout our business relationship and for as long as needed for its purpose or required by law. In deciding retention, we consider the amount and nature of data, risks of unauthorised use/disclosure, processing purposes, whether they can be achieved otherwise and legal duties.

Generally, data is retained for the relationship's duration and as required for tax, technical or other legal reasons. Registration data remains in the account until you delete it or close the account. Browsing data is retained for six months. Contact-form data is deleted after communication ends and requests are finally resolved. Legal duties may require retention even after account deletion or where an account has an outstanding balance, claim or dispute. Data needed to resolve a dispute remains for its duration within applicable limitation rules. If legal proceedings directly or indirectly concern the data subject, the retention period is suspended throughout them until a final judgment, after which it continues until the limitation period expires.

B11. Consent and withdrawal

By transacting with Freedman under its Terms, you declare agreement with this Privacy Policy. Freedman may process data for advertising/information only after obtaining consent. Consent is obtained through a specific field when visiting, creating an account or placing an order, explaining processing purposes and data use. You may withdraw consent at any time by emailing info@freedman.gr. You cannot unsubscribe from certain messages necessary for orders and website operation, including service emails such as registration confirmations and customer-service information, or purchase communications such as order confirmations, contractual documents and payment processing.

B12. Data-subject rights

Under GDPR, you have rights to information, access, restriction, correction and deletion of data processed under this policy, and to receive and transfer your data to another controller without our objection. Send written requests to info@freedman.gr or through the contact form. We must notify relevant parties of correction, deletion or restriction under Article 19 of EU Regulation 2016/679. You may request deletion of the entire account or selected personal data.

We reserve the right to continue processing where compelling protected grounds override your interests, fundamental rights and freedoms, or where processing is needed to exercise or defend legal claims. We must provide a reasoned response to requests within one month. This may be extended by two more months if necessary because of complexity or number of requests. We must explain reasons for delay or inaction. Freedman may verify the applicant's identity. You may complain to the Hellenic Data Protection Authority at https://www.dpa.gr/.

B13. Severability, law and disputes

If any provision becomes or is declared unlawful, invalid or unenforceable, it automatically ceases and is removed without affecting the rest. These Terms are governed by Greek law. Parties undertake to seek amicable resolution of disputes. Disputes relating to this Policy are subject to the non-exclusive jurisdiction of the courts of Thessaloniki. This does not affect consumers' statutory rights.